Research notes

Intro MITM attacks are widely used by penetration testers, as they have a significant impact in allowing them to intercept credentials from…

IPv6 often remains active in corporate networks. In this article, I will discuss attacks on IPv6 and detection methods. Intro IPv6 is…

Developed by computer security and privacy experts at the National Institute of Standards and Technology (NIST), NIST Special Publication (SP) 800-53, Security and…

This blog post will walk you through the steps of remotely capturing traffic from a domain controller and then analyzing it locally.…

Introduction When I talk about EDRs in this article, I mean a combination of endpoint protection (EPP) and endpoint detection and response…

Just a walkthrough of how to escalate privileges locally by forcing the system you landed initial access on to reflectively authenticate over…

In this ultimate guide to the ISO 27001 controls we are going to explore the security control requirements. We will go through…

Introduction If you’ve ever tried to run a command prompt as administrator on your Windows OS before, you’ve seen a harmless popup…

Administrators typically use Remote Desktop Protocol (RDP) in order to manage Windows environments remotely. It is also typical RDP to be enabled…

Why this post? The purpose of this guide is to view Active Directory from an attacker perspective. I will try to review…